Red Hat Security Advisory

RHSA-2023:7259

.NET 6.0 security, bug fix, and enhancement update

Released 2023-11-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7) rh-dotnet60-aspnetcore-runtime-6.0-6.0.25-1.el7_9, rh-dotnet60-aspnetcore-targeting-pack-6.0-6.0.25-1.el7_9, rh-dotnet60-dotnet-6.0.125-1.el7_9 +9
.NET Core on Red Hat Enterprise Linux Server (v. 7) rh-dotnet60-aspnetcore-runtime-6.0-6.0.25-1.el7_9, rh-dotnet60-aspnetcore-targeting-pack-6.0-6.0.25-1.el7_9, rh-dotnet60-dotnet-6.0.125-1.el7_9 +9
.NET Core on Red Hat Enterprise Linux Workstation (v. 7) rh-dotnet60-aspnetcore-runtime-6.0-6.0.25-1.el7_9, rh-dotnet60-aspnetcore-targeting-pack-6.0-6.0.25-1.el7_9, rh-dotnet60-dotnet-6.0.125-1.el7_9 +9

TI-2023-18392 CVE-2023-36558 · GHSA-3fx3-85r4-8j3w

MEDIUM 63

ASP.NET Core Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.01077 Published 2023-11-14 Fixed in 6.0.25, 7.0.14 +5

TI-2023-18100 CVE-2023-36049 · GHSA-c3hf-8vgx-72rh

MEDIUM 58

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0679 Published 2023-11-14 Fixed in 17.2.22, 17.4.14 +11 CWE-20